Bryan Gruhlke » Google

Install Skipfish on CentOS/RedHat

Bryan Gruhlke — Tue, 08 Jun 2010 23:25:48 +0000

Don’t forget to leave your comments, opinions, or hate mail. All entries will be published (unless you use bad language, so keep it civil).

I was looking to install Skipfish, Google’s web security testing application, on my development server. My server runs CentOS (basically RedHat). There seem to be a bunch of instructions for Debian-based Linux installs, but not for RedHat versions.

Skipfish will allow me to test my various websites for security issues such as cross-site scripting, SQL injection, server config problems, and more in a development environment. The idea is to test sites (especially anything handling monetary transactions) before any large updates are implemented to a production/live system.

Obviously, the first step is download the latest version of Skipfish to the server you’re working on. As of today, the current version is 1.34b; as updates are made make sure you update the below statement.

wget http://skipfish.googlecode.com/files/skipfish-1.33b.tgz
tar zxvf skipfish-1.33b.tgz
cd skipfish

Use the Yum automated software installer and ensure you have the appropriate dependencies.

yum install openssl-devel
yum install gcc
yum install libidn-devel

Use make to compile the application and copy the default library to be used (per the Skipfish project’s suggestions).

make
cp dictionaries/default.wl skipfish.wl

Everything should be all set and ready to go. You can access Skipfish by running the skipfish command with various flags. See the Skipfish documentation for details or enter the below for a quick review.

./skipfish -h

Share and Enjoy:

Photographers With Flash Sites

Bryan Gruhlke — Sat, 31 Jan 2009 07:53:33 +0000

I revel in finding others who GET IT! Yes, Flash websites are super pretty. And they have some awesome functions and abilities. But, hey! Google ignores your site (or at best gives it a low priority). Guess no one will be finding you unless they already know you personally.

Check out Kim Larson’s post about how she improved her website’s traffic and boosted her business. How I Changed My Web Site to Grow My Photography Business.

By the way – this is Search Engine Optimization (SEO) at its most basic. If you need help improving your site’s search engine penetration and rankings give me call!

Share and Enjoy:

New Googlebomb! “Cheerful Achievement”

Bryan Gruhlke — Fri, 23 Jan 2009 17:32:02 +0000

Googlebombs, an effort to inflate a website’s search ranking for a particular term, has been used often by vcarying sides in many debates. Probably the most infamous use of a Googlebomb was “miserable failure,” which placed the official White House homepage of George W. Bush atop the search engine rankings for the term (for a time).

We are only a few days into Barak Obama’s administration and there has already been news of a new Googlebomb. At least this one wasn’t so negative: “cheerful achievement.”

According to Google Blogscoped, entering that particular search term yielded the new Obama official White House homepage. Google has announced that they have lessened the impact of these so-called Googlebombs which may explain why this particular instance has already begun to wear off. The White House site is no longer listed on the first page of results.

Share and Enjoy: